Openssh5.1p1 sftp file control

[volksman]

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=9.10
DISTRIB_CODENAME=karmic
DISTRIB_DESCRIPTION="Ubuntu 9.10"

openssh 5.1-p1

Has support for chroot sftp users, however there is no way to control file permissions.

There is a patch here:

http://sftpfilecontrol.sourceforge.net/

That when applied adds a few items to sshd_conf to allow umask and a couple other overrides. This seems to have been accepted for openssh5.4. Would be great to see that patch implemented in 5.1p1 and even 5.3 (for Lucid).

[Colin Watson (cjwatson)]

I plan to maintain a backport of 5.4p1 (or 5.5p1 once released) to Lucid
in a PPA. I haven't decided yet whether to maintain backports of
individual features like this, but I suspect I won't have time to do a
decent job of both.

[volksman (v0lksman69)]

A backport of 5.4 or 5.5 in Lucid would be fantastic. Then we can completely eliminate the need for scponly hacks.

[Colin Watson (cjwatson)]

For Lucid, not in Lucid - Lucid itself will stay on 5.3p1.

[Scott Moser (smoser)]

Marking 'Triaged' and Wishlist based on Colin's comments.

[Peter Matulis (petermatulis)]

I don't see any mention of umask in the sshd_config man page after installing 10.10 RC.

[Peter Matulis (petermatulis)]

OK, it's in the sftp-server man page.

[Giovanni Bajo (giovannibajo)]

Notice that OpenSSH added an option to change umask (which has always been possible through a wrapper script), but they still not support disabling chown and chmod, which is instead supported by the sftpfilecontrol patch.